Skip to content

googleIdentityPlatformProjectDefaultConfig

There is no persistent data associated with this resource.

\~> Warning: If you are using User ADCs (Application Default Credentials) with this resource, you must specify a billingProject and set userProjectOverride to true in the provider configuration. Otherwise the ACM API will return a 403 error. Your account must have the serviceusageServicesUse permission on the billingProject you defined.

Example Usage - Identity Platform Project Default Config

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as google from "./.gen/providers/google";
/*The following providers are missing schema information and might need manual adjustments to synthesize correctly: google.
For a more precise conversion please use the --provider flag in convert.*/
new google.identityPlatformProjectDefaultConfig.IdentityPlatformProjectDefaultConfig(
  this,
  "default",
  {
    sign_in: [
      {
        allow_duplicate_emails: true,
        anonymous: [
          {
            enabled: true,
          },
        ],
        email: [
          {
            enabled: true,
            password_required: false,
          },
        ],
        phone_number: [
          {
            enabled: true,
            test_phone_numbers: [
              {
                "+11231231234": "000000",
              },
            ],
          },
        ],
      },
    ],
  }
);

Argument Reference

The following arguments are supported:

  • signIn - (Optional) Configuration related to local sign in methods. Structure is documented below.

  • project - (Optional) The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

The signIn block supports:

  • email - (Optional) Configuration options related to authenticating a user by their email address. Structure is documented below.

  • phoneNumber - (Optional) Configuration options related to authenticated a user by their phone number. Structure is documented below.

  • anonymous - (Optional) Configuration options related to authenticating an anonymous user. Structure is documented below.

  • allowDuplicateEmails - (Optional) Whether to allow more than one account to have the same email.

  • hashConfig - (Output) Output only. Hash config information. Structure is documented below.

The email block supports:

  • enabled - (Optional) Whether email auth is enabled for the project or not.

  • passwordRequired - (Optional) Whether a password is required for email auth or not. If true, both an email and password must be provided to sign in. If false, a user may sign in via either email/password or email link.

The phoneNumber block supports:

  • enabled - (Optional) Whether phone number auth is enabled for the project or not.

  • testPhoneNumbers - (Optional) A map of \ that can be used for phone auth testing.

The anonymous block supports:

  • enabled - (Required) Whether anonymous user auth is enabled for the project or not.

The hashConfig block contains:

  • algorithm - (Output) Different password hash algorithms used in Identity Toolkit.

  • signerKey - (Output) Signer key in base64.

  • saltSeparator - (Output) Non-printable character to be inserted between the salt and plain text password in base64.

  • rounds - (Output) How many rounds for hash calculation. Used by scrypt and other similar password derivation algorithms.

  • memoryCost - (Output) Memory cost for hash calculation. Used by scrypt and other similar password derivation algorithms. See https://tools.ietf.org/html/rfc7914 for explanation of field.

Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

  • id - an identifier for the resource with format {{project}}

  • name - The name of the Config resource. Example: "projects/my-awesome-project/config"

Timeouts

This resource provides the following Timeouts configuration options:

  • create - Default is 20 minutes.
  • update - Default is 20 minutes.
  • delete - Default is 20 minutes.

Import

ProjectDefaultConfig can be imported using any of these accepted formats:

$ terraform import google_identity_platform_project_default_config.default projects/{{project}}/config/{{name}}
$ terraform import google_identity_platform_project_default_config.default {{project}}/{{name}}
$ terraform import google_identity_platform_project_default_config.default {{name}}

User Project Overrides

This resource supports User Project Overrides.